IN THE CLAIMS 



Each claim of the present application is set forth below with a parenthetical notation 
immediately following the claim number indicating the current claim status. The Examiner's 
entry of the claim amendments, as shown in marked-up form, under Section 1.121 is 
respectfully requested. 

1. (CURRENTLY AMENDED) A method for classifying a data packet by 
determining whether a search objec t comprising information within the data packet matches 
an entry a search node in a knowledge base, wherein the knowledge base comprises a decision 
tree structure comprising a plurality of search nodes; defining a plurality of paths through the 
decision tree structure, each path comprising search nodes and a joining link between adjacent 
search nodes and a plurality of links joining two 3carch nodc3, said method comprising: 

storing a first portion of the decision tree structure in a first memory, having a first 
memory access time, wherein the first portion comprises a first plurality of search nodes and 
interconnecting joining links; 

storing a second portion of the decision tree structure in a second memory, having a 
second memory access time, wherein the second portion comprises a second plurality of 
search nodes and interconnecting joining links, and wherein the first memory access time is 
less than the second memory access time; 

reading a fifst current search node from the first memory; 

comparing the &st current search node with at least a portion of the search object; 

and 

based on a result of the step of comparing, -step; traversing a search path from the 
current fest search node to a next second search node via the joining link: therebetween; and 

successively executing the steps of comparing and traversing to define a path through 

the decision tree structure, wherein the path terminates at a terminal search node matching the 
search object to classify the data packet. 

2. (CURRENTLY AMENDED) The method of claim 1 wherein the 
information within the data packet comprises a destination address of the data packet, further 
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comprising reading the second search node and comparing at least a portion of the search 
object with the second search node. 

3. (CANCELLED) 

4. (ORIGINAL) The method of claim 1 wherein the step of reading is executed 
by a processor formed in an integrated circuit, and wherein the first memory is formed on the 
integrated circuit, such that the step of reading search nodes from the first memory executes 
faster than the step of reading search nodes from the second memory. 

5. (ORIGINAL) The method of claim 1 wherein the first portion of the decision 
tree structure comprises the search nodes near the first search entry. 

6. (ORIGINAL) The method of claim 1 wherein the decision tree structure 
comprises a plurality of levels, each comprising a plurality of search nodes, and wherein the 
search nodes comprising one of the plurality of levels are connected to search nodes 
comprising another one of the plurality of levels by links. 

7. (PREVIOUSLY PRESENTED) The method of claim 6 wherein a 
predetermined number of lower levels of the plurality of levels are stored in the first memory, 
and wherein a remaining plurality of levels are stored in the second memory. 

8. (ORIGINAL) The method of claim 7 wherein the predetermined number of 
lower levels of the plurality of levels have a faster read access time than the remaining plurality 
of levels. 

9. (CANCELLED) 

10. (ORIGINAL) The method of claim 1 wherein the search object comprises a 
plurality of symbols. 

1L (ORIGINAL) The method of claim 10 wherein the symbols comprise a 
plurality of binary bits. 

12. (ORIGINAL) The method of claim 1 wherein the knowledge base comprises 
a classification engine of a communications network processor for determining an attribute of 
the data input thereto, and wherein the second portion of the decision tree ends in a plurality 
of terminating nodes, the method further comprising repeating the steps of reading, 
comparing and traversing until a terminating node is reached, wherein the terminating node 
identifies the attribute of the input data. 

13. (CANCELLED) 



4 



14. (ORIGINAL) The method of claim 1 wherein each one of the plurality of 
search nodes comprises an instruction and an address field, wherein the step of comparing 
further comprises comparing at least a portion of the search object with the instruction, and 
wherein the address field determines the second search node based on the comparing step. 

15. (ORIGINAL) The method of claim 1 wherein the decision tree structure 
comprises a plurality of contiguous tree levels, wherein each tree level further comprises a 
search node and link to a search node of the next adjacent tree level 

16. (ORIGINAL) The method of claim 15 wherein the first portion of the 
decision tree structure comprises a predetermined number of contiguous tree levels and the 
second portion of the decision tree structure comprises the remaining contiguous tree levels. 

17. (ORIGINAL) The method of claim 15 wherein the first portion of the 
decision tree structure comprises a portion of one or more contiguous tree levels. 

18. (CURRENTLY AMENDED) An apparatus for determining whether a search 
object matches any entry a search node in a knowledge base, wherein the knowledge base 
comprises a decision tree structure comprising a plurality of links between adjacent search 
nodes; defining a plurality of paths through the decision tree structure, each path comprising 
search nodes and joining links between adjacent search nodes, said apparatus comprising: 

a first memory having a first memory access time and storing a first portion of the 
decision tree structure; 

a second memory having a second memory access time and storing a second portion 
of the decision tree structure wherein the first memory access time is less than the second 
memory access time: and 

a processor for successively determining whether m aiehifig at least a portion of the 
search object matches wife a search node and for traversin g to define a path comprising 
search nodes and adjoining links through the decision tree structure in response to the match. 
until a terminal search node is reached, the terminal search node matching at least a portion of 
the search object. 

19. (CANCELLED) 

20. (ORIGINAL) The apparatus of claim 18 wherein the processor and the first 
memory are formed in the same integrated circuit, such that reading search entries from the 
first memory is faster than reading search entries from the second memory. 
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21. (CANCELLED) 

22. (ORIGINAL) The apparatus of claim 1 8 wherein the decision tree structure 
comprises a plurality of levels, each comprising a plurality of search nodes, and wherein the 
search nodes comprising one of the plurality of levels are connected to search nodes 
comprising an adjacent one of the plurality of levels by a link, and wherein the first memory 
stores at least the first level. 

23. (CURRENTLY AMENDED) An apparatus for determining whether a search 
object matches a search node any entry in a knowledge base, wherein the knowledge base 
comprises a decision tree structure comprising a plurality of links connecting adjacent search 
nodes; to define paths through the decision tree structure said apparatus comprising: 

a first processor; 
a second processor; 

a first memory having a first memory access time and storing a first portion of the 
decision tree structure; and 

a second memory having a second memory access time and storing a second portion 
of the decision tree structure wherein the first memory access time is less than the second 
memory access time; time. 

wherein said first processor accesses said first memory, and wherein said second 
processor accesses said second memory for successively determining whether at least a 
portion of the search object matches a the search node to define a path through the decision 
tree structure until a terminal search node is reached, said terminal search node matching thai 
matches at least a portion of said search object. 

24. (ORIGINAL) The apparatus of claim 23 wherein the first processor 
compares at least a portion of the search object with one or more search nodes stored in the 
first memory to traverse through the first portion; and 

wherein after the first portion of the decision tree has been traversed, the second 
processor compares at least a portion of the search object with one or more search entries 
stored in the second memory to traverse through the second portion until a search node 
matching at least a portion of the search object is determined. 

25. (ORIGINAL) The apparatus of claim 23 wherein the first processor and the 
second processor simultaneously execute tree searches for a plurality of search trees. 
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